Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2026-94181

Address Bar Spoof Risk; Missing Fullscreen Notification via Select Element

Description

An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a <select> element that triggers requestFullscreen without displaying the fullscreen notification.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The Browser Company of New York Arc

Default version status: unaffected

  • 0 to < 1.159.0affected

References